CVE-2023-20519

Low

Description

A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's migration agent resulting in a potential loss of guest integrity.

SeverityLow

CVSS3.3

Exploit probability—

ProductAmd Milanpi Firmware

PublishedNov 14, 2023

First seenNov 14, 2023

How to fix

Update

amd milanpi_firmware1.0.0.a or later
amd genoapi_firmware1.0.0.3 or later

Vendor advisories

amd.com/en/corporate/product-security/bulletin/AMD-SB-3002

Affected products

Product	Affected versions	Fixed in
amd milanpi_firmware	v < 1.0.0.a	1.0.0.a
amd genoapi_firmware	v < 1.0.0.3	1.0.0.3

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.